$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/bc3f5013-698c-36d5-83ea-4f564daf88b5.roa File: bc3f5013-698c-36d5-83ea-4f564daf88b5.roa (raw, json) Hash identifier: MZXKmlnqcBnH3fxJJDRFRnbnNb9Nd0hmFr+z0OhpbKk= Subject key identifier: EF:4E:F9:A4:DA:8F:C4:AE:5D:B2:CE:AE:35:72:D7:5B:7C:52:86:05 Certificate issuer: /CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb Certificate serial: 010D0C9F4328584D571FA1563D35C68FFB955F80 Authority key identifier: 22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/bc3f5013-698c-36d5-83ea-4f564daf88b5.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 15128 IP address blocks: 2604:fb80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:a1:56:3d:35:c6:8f:fb:95:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=b05a2781-f815-4d30-9878-c52352519c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b2:bf:92:f2:ce:1f:48:f4:d1:8b:41:72:53: 1f:41:02:3c:f4:83:39:f6:eb:58:fc:e6:96:40:ee: 79:96:1b:b8:34:9f:3a:e2:fe:3f:cf:e5:64:c9:99: 5c:a7:31:ff:f1:b6:4e:4e:90:15:dd:5b:75:5a:87: 1d:61:96:0d:62:33:a7:d0:31:e3:c7:03:61:12:b3: 80:9f:0a:a3:29:d6:b6:10:f3:bb:07:ee:c8:1d:76: e8:8e:b3:63:f0:dd:15:aa:4c:d6:84:1a:ef:40:29: 13:03:58:73:a3:31:e4:8a:eb:34:00:87:93:53:43: fe:11:c9:95:14:53:22:72:7e:34:51:65:ab:aa:d9: a4:a3:5a:31:01:8c:05:de:f6:cf:c6:37:b0:1c:bd: a7:11:cb:54:3f:f3:5e:1e:fe:5a:dc:01:6e:c1:2a: 49:75:37:bd:8c:67:98:57:9f:7e:f3:67:6f:6b:91: 1b:88:e4:bf:f1:8b:c2:42:fb:ab:50:77:b2:98:51: 24:5a:1b:47:53:72:1b:17:f4:2a:23:a0:8f:a6:f3: f5:b3:37:9a:e2:bb:91:d0:3b:b7:25:52:68:07:ec: 21:84:23:44:d8:dd:f7:fd:02:29:c2:00:c7:8b:d5: 6e:fc:b3:79:28:e4:8d:0a:83:ca:c3:38:4f:43:b2: ea:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4E:F9:A4:DA:8F:C4:AE:5D:B2:CE:AE:35:72:D7:5B:7C:52:86:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/bc3f5013-698c-36d5-83ea-4f564daf88b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl X509v3 Authority Key Identifier: keyid:22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer sbgp-ipAddrBlock: critical IPv6: 2604:fb80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:39:43:61:74:73:51:ee:7b:5a:68:8d:99:04:c2:eb:5b:34: f1:bc:2a:b5:14:8c:70:f2:8a:16:5d:d3:b3:7e:0a:df:c2:0c: be:22:f2:46:b1:ae:27:df:95:87:1e:a3:13:17:bf:a9:de:79: 46:df:b0:e5:c5:d5:bb:59:a6:99:ae:16:a4:76:1d:4f:f0:cb: 21:e8:5a:e8:b3:8e:89:38:a9:af:57:8c:60:e9:75:0c:5a:5c: b0:5c:04:d8:44:31:6a:3d:12:7a:ad:ff:4b:8b:f0:92:b9:f3: 51:3a:6b:b7:1e:56:55:ae:2f:c0:f6:a9:6f:e1:86:76:d3:a3: 60:6e:cb:5b:34:cf:e4:5c:f0:8c:23:1d:5c:c0:f8:83:97:89: ca:75:78:99:d9:32:a7:f9:11:19:bb:07:70:33:24:06:c2:e0: 3d:1d:f1:9b:b5:98:82:e8:1b:fd:ad:f2:3a:21:63:b3:de:a4: 7f:50:56:25:c0:8d:43:5b:7f:01:4c:ab:5e:09:b9:ce:47:7d: eb:4f:22:4f:64:3f:55:a9:35:a6:59:1a:52:1f:3d:95:7d:7b: 87:c9:30:e4:d5:82:cf:d5:b4:e2:f0:4b:46:47:2b:30:88:61: 93:33:6c:5c:28:eb:1a:d0:96:08:77:56:4b:82:05:0b:3b:2e: 4f:37:04:86 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1XH6FWPTXGj/uVX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU2NTNmMzctNGIyMi00MGEzLWE4YmQtZTcwZjIwOGMw ZWZiMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk YjA1YTI3ODEtZjgxNS00ZDMwLTk4NzgtYzUyMzUyNTE5YzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7K/kvLOH0j00YtBclMfQQI89IM59utY/OaW QO55lhu4NJ864v4/z+VkyZlcpzH/8bZOTpAV3Vt1WocdYZYNYjOn0DHjxwNhErOA nwqjKda2EPO7B+7IHXbojrNj8N0VqkzWhBrvQCkTA1hzozHkius0AIeTU0P+EcmV FFMicn40UWWrqtmko1oxAYwF3vbPxjewHL2nEctUP/NeHv5a3AFuwSpJdTe9jGeY V59+82dva5EbiOS/8YvCQvurUHeymFEkWhtHU3IbF/QqI6CPpvP1szea4ruR0Du3 JVJoB+whhCNE2N33/QIpwgDHi9Vu/LN5KOSNCoPKwzhPQ7LqIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO9O+aTaj8SuXbLOrjVy11t8UoYFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZTY1 M2YzNy00YjIyLTQwYTMtYThiZC1lNzBmMjA4YzBlZmIvYmMzZjUwMTMtNjk4Yy0z NmQ1LTgzZWEtNGY1NjRkYWY4OGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGU2NTNmMzctNGIyMi00MGEzLWE4 YmQtZTcwZjIwOGMwZWZiLzRlNjUzZjM3LTRiMjItNDBhMy1hOGJkLWU3MGYyMDhj MGVmYi5jcmwwHwYDVR0jBBgwFoAUIiOW/w0X1WDrC+ORelaadJKAwRgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZTY1M2YzNy00YjIyLTQwYTMtYThiZC1lNzBm MjA4YzBlZmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT7gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCPOUNhdHNR7ntaaI2ZBMLrWzTxvCq1FIxw8ooWXdOzfgrfwgy+IvJG sa4n35WHHqMTF7+p3nlG37DlxdW7WaaZrhakdh1P8Msh6Fros46JOKmvV4xg6XUM WlywXATYRDFqPRJ6rf9Li/CSufNROmu3HlZVri/A9qlv4YZ206NgbstbNM/kXPCM Ix1cwPiDl4nKdXiZ2TKn+REZuwdwMyQGwuA9HfGbtZiC6Bv9rfI6IWOz3qR/UFYl wI1DW38BTKteCbnOR33rTyJPZD9VqTWmWRpSHz2VfXuHyTDk1YLP1bTi8EtGRysw iGGTM2xcKOsa0JYId1ZLggULOy5PNwSG -----END CERTIFICATE-----Generated at Fri Apr 17 16:33:54 2026 by rpki-client